| *** macz_ has joined #openstack-ansible | 01:54 | |
| *** macz_ has quit IRC | 01:59 | |
| *** jamesdenton has joined #openstack-ansible | 02:28 | |
| *** evrardjp has quit IRC | 02:33 | |
| *** evrardjp has joined #openstack-ansible | 02:33 | |
| *** macz_ has joined #openstack-ansible | 03:03 | |
| *** macz_ has quit IRC | 03:07 | |
| *** pto has joined #openstack-ansible | 04:56 | |
| *** macz_ has joined #openstack-ansible | 05:04 | |
| *** macz_ has quit IRC | 05:09 | |
| *** miloa has joined #openstack-ansible | 05:21 | |
| *** macz_ has joined #openstack-ansible | 05:25 | |
| *** macz_ has quit IRC | 05:29 | |
| *** shyamb has joined #openstack-ansible | 05:40 | |
| *** shyam89 has joined #openstack-ansible | 05:54 | |
| *** shyamb has quit IRC | 05:55 | |
| *** cyberpear has quit IRC | 05:57 | |
| *** mnaser has quit IRC | 05:59 | |
| *** mnaser has joined #openstack-ansible | 06:00 | |
| *** cyberpear has joined #openstack-ansible | 06:00 | |
| *** miloa has quit IRC | 06:03 | |
| openstackgerrit | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_zun master: Use ansible_facts[] instead of fact variables https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/780733 | 06:12 |
|---|---|---|
| *** shyam89 has quit IRC | 06:42 | |
| *** macz_ has joined #openstack-ansible | 06:46 | |
| *** luksky has joined #openstack-ansible | 06:49 | |
| *** macz_ has quit IRC | 06:51 | |
| *** shyamb has joined #openstack-ansible | 07:07 | |
| jrosser | morning | 07:10 |
| *** andrewbonney has joined #openstack-ansible | 07:11 | |
| noonedeadpunk | mornings! | 07:23 |
| noonedeadpunk | have interesting thing here:) just realized, that buster has libvirt 7 installed in CI | 07:23 |
| jrosser | oh! | 07:24 |
| jrosser | theres an apt log which should show when that was installed | 07:24 |
| noonedeadpunk | but I have no idea how that has happened as I can't see libvirt 7 for buster in https://packages.debian.org/buster/libvirt-daemon | 07:24 |
| jrosser | maybe something is broken with the image building now the bullseye repos are there? | 07:25 |
| noonedeadpunk | well, there is. and I checked it. and eventually infra mirrors does have it in main (even not in the backports) | 07:25 |
| noonedeadpunk | maybe mirroring is broken.... | 07:25 |
| jrosser | perhaps check the SHA of the deb against the one from bullseye | 07:26 |
| jrosser | if they're the same it's looking like mirror wierdness | 07:26 |
| noonedeadpunk | ie https://mirror.gra1.ovh.opendev.org/debian/pool/main/libv/libvirt/ | 07:27 |
| jrosser | even if the same version number was in buster i'd expect the binary to be different | 07:27 |
| noonedeadpunk | yeah, probably that's really from bullseye, as version is the same | 07:29 |
| noonedeadpunk | md5 is the same | 07:29 |
| jrosser | oh well actually its a pool dir isnt it | 07:30 |
| jrosser | so all the deb just go in the same big bucket and the Packages file actually says whats what for each distro version? | 07:30 |
| jrosser | it would be this file saying which deb are the ones you want for bullseye https://mirror.gra1.ovh.opendev.org/debian/dists/bullseye/main/binary-amd64/ | 07:31 |
| jrosser | and similar for buster | 07:31 |
| *** rpittau|afk is now known as rpittau | 07:33 | |
| noonedeadpunk | the good news I guess is that we've kind of testing bullseye atm | 07:33 |
| jrosser | i'm just downloading the Packages file for buster | 07:34 |
| noonedeadpunk | me too | 07:34 |
| jrosser | it's massive! | 07:34 |
| jrosser | i don't see anything except Version: 5.0.0-4+deb10u1 in the buster packages file | 07:40 |
| andrewbonney | Is it coming from here? http://osbpo.debian.net/osbpo/pool/buster-victoria-backports-nochange/main/l/libvirt/ | 07:43 |
| andrewbonney | via https://github.com/openstack/openstack-ansible-openstack_hosts/blob/master/vars/debian.yml#L88 | 07:43 |
| noonedeadpunk | Yeah, me neither... | 07:45 |
| noonedeadpunk | it's so weird... | 07:45 |
| *** tosky has joined #openstack-ansible | 07:46 | |
| *** shyamb has quit IRC | 07:48 | |
| noonedeadpunk | apt conf looks super valid for me https://bb24b88c59d7f6837dc4-1c4caaf4d8e2d09894889f3221a65fdb.ssl.cf5.rackcdn.com/787199/1/check/openstack-ansible-deploy-aio_metal-debian-buster/23262e2/logs/etc/host/apt/sources.list.d/index.html | 07:49 |
| *** shyamb has joined #openstack-ansible | 07:54 | |
| *** shyam89 has joined #openstack-ansible | 07:55 | |
| jrosser | noonedeadpunk: andrewbonney is right, you can see it install the osbpo version here https://bb24b88c59d7f6837dc4-1c4caaf4d8e2d09894889f3221a65fdb.ssl.cf5.rackcdn.com/787199/1/check/openstack-ansible-deploy-aio_metal-debian-buster/23262e2/logs/host/apt/history.log.txt | 07:58 |
| *** shyamb has quit IRC | 07:58 | |
| noonedeadpunk | ah, indeed! | 07:59 |
| *** shyam89 has quit IRC | 08:00 | |
| jrosser | not sure i know what to make of that | 08:00 |
| jrosser | as suddenly now anyone with a buster deployment gets a surprise upgrade to libvirt-7 | 08:00 |
| noonedeadpunk | well, yes, I'd expect that to be for W indeed | 08:01 |
| noonedeadpunk | and on W you will get just default libvirt 5 | 08:01 |
| openstackgerrit | Merged openstack/openstack-ansible master: Remove OpenSUSE from role maturity matrix https://review.opendev.org/c/openstack/openstack-ansible/+/787173 | 08:01 |
| jrosser | oh i'm confused though, the directory is buster-victoria-backports-nochange ? | 08:02 |
| noonedeadpunk | are you complaining about nochange part?:) | 08:05 |
| noonedeadpunk | I meant that for buster on W there's no backports | 08:05 |
| jrosser | well even for victoria we use that repo? https://github.com/openstack/openstack-ansible-openstack_hosts/blob/stable/victoria/vars/debian.yml | 08:06 |
| noonedeadpunk | yep? | 08:07 |
| noonedeadpunk | yes, you're right about all V users will get new libvirt | 08:07 |
| noonedeadpunk | what I'm upset with is about that on W we still can't offer buster for upgrade purposes I guess | 08:08 |
| *** macz_ has joined #openstack-ansible | 08:12 | |
| *** odyssey4me has joined #openstack-ansible | 08:15 | |
| *** macz_ has quit IRC | 08:16 | |
| *** luksky has quit IRC | 08:24 | |
| *** luksky has joined #openstack-ansible | 08:24 | |
| *** luksky has quit IRC | 08:25 | |
| *** luksky has joined #openstack-ansible | 08:25 | |
| *** shyamb has joined #openstack-ansible | 08:38 | |
| *** shyamb has quit IRC | 08:57 | |
| rndmh3ro | noonedeadpunk: thanks for merging the encryption feature in the galera role! | 09:15 |
| noonedeadpunk | thanks for working on it:) | 09:17 |
| *** gshippey has joined #openstack-ansible | 09:30 | |
| openstackgerrit | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_octavia master: Make octavia_provider_network better configurable https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/787336 | 09:41 |
| *** rohit02 has joined #openstack-ansible | 09:56 | |
| *** shyamb has joined #openstack-ansible | 09:59 | |
| rohit02 | hi team,we need to deploy openstack ansible victoria with all endpoints on ssl i.e public,internal,admin but not getting these setting in doc.can you please help with that? | 10:01 |
| openstackgerrit | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_octavia master: Make octavia_provider_network better configurable https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/787336 | 10:27 |
| noonedeadpunk | rohit02: you can set `haproxy_ssl_all_vips: true` | 10:27 |
| *** shyamb has quit IRC | 10:28 | |
| rohit02 | noonedeadpunk: user_variables.yml in this file right.....do i need to mentioned these option also "keystone_service_internaluri_proto: https | 10:30 |
| rohit02 | " keystone_service_internaluri_insecure: True | 10:30 |
| jrosser | rohit02: thats handled in group_vars here https://opendev.org/openstack/openstack-ansible/src/branch/master/inventory/group_vars/all/keystone.yml#L36-L41 | 10:32 |
| jrosser | so the proper override to cover the internal services globally would be https://opendev.org/openstack/openstack-ansible/src/branch/master/inventory/group_vars/all/all.yml#L88 | 10:33 |
| jonher | re 783236 cloudkitty, before pushing the fixes that was commented on, i worked on the secret migration (if user has set cloudkitty secrets elsewhere) and this is the nicest i've managed to get it: http://paste.openstack.org/show/804661/ does that look acceptable? | 10:36 |
| openstackgerrit | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Remove cephfs_enable_snapshots https://review.opendev.org/c/openstack/openstack-ansible/+/787341 | 10:39 |
| *** shyamb has joined #openstack-ansible | 10:43 | |
| *** shyam89 has joined #openstack-ansible | 10:45 | |
| *** shyamb has quit IRC | 10:47 | |
| openstackgerrit | Merged openstack/openstack-ansible-galera_server master: Bump MariaDB version to 10.5.9 https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/777088 | 10:58 |
| *** mgariepy has quit IRC | 11:16 | |
| openstackgerrit | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Remove cephfs_enable_snapshots https://review.opendev.org/c/openstack/openstack-ansible/+/787341 | 11:17 |
| openstackgerrit | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_manila master: Set manila_backends to empty dict by default https://review.opendev.org/c/openstack/openstack-ansible-os_manila/+/787354 | 11:24 |
| openstackgerrit | Merged openstack/openstack-ansible-os_magnum master: [goal] Deprecate the JSON formatted policy file https://review.opendev.org/c/openstack/openstack-ansible-os_magnum/+/781538 | 11:29 |
| openstackgerrit | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_manila master: Set manila_backends to empty dict by default https://review.opendev.org/c/openstack/openstack-ansible-os_manila/+/787354 | 11:33 |
| openstackgerrit | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Cleanup after service variables merged https://review.opendev.org/c/openstack/openstack-ansible/+/769974 | 11:38 |
| openstackgerrit | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Cleanup after service variables merged https://review.opendev.org/c/openstack/openstack-ansible/+/769974 | 11:41 |
| openstackgerrit | Merged openstack/openstack-ansible-os_zun master: [reno] Stop publishing release notes https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/772053 | 11:42 |
| rohit02 | jrosser: you means i need to mentioned only "haproxy_ssl_all_vips: true" in user_variable file right or do i need to add anything | 11:45 |
| jrosser | well it's two things i think, 1) configure haproxy to be SSL on internal 2) set the service URL to be https rather than http | 11:47 |
| jrosser | so it feels like there are two pieces of config | 11:47 |
| *** rh-jlabarre has joined #openstack-ansible | 11:48 | |
| jrosser | i just looked through the group vars, you might be interested to use codesearch for this to understand where all the settings are used https://codesearch.opendev.org/?q=openstack_service_internaluri_proto | 11:48 |
| rohit02 | jrosser: can u plzz send me the doc link or do u have any example set | 11:50 |
| openstackgerrit | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Remove cephfs_enable_snapshots https://review.opendev.org/c/openstack/openstack-ansible/+/787341 | 11:51 |
| jrosser | rohit02: i don't thing there is a specific documentation for enabling internal https in openstack-ansible, but pretty much everything can be overidden in your user_variables.yml | 11:53 |
| jrosser | rohit02: you had asked about keystone_service_internaluri_insecure, so i put that straight into codesearch like this https://codesearch.opendev.org/?q=keystone_service_internaluri_insecure | 11:54 |
| jrosser | and the first result then shows you that there is a deployment wide variable called openstack_service_internaluri_proto | 11:55 |
| rohit02 | jrosser: my goal is each openstack service all endpoints on ssl | 11:56 |
| jrosser | i'm trying to show you the tools to find this stuff, rather than need to have specific documentation for many hundreds of overrides | 11:56 |
| jrosser | rohit02: yes, and hopfeully i'm showing you how to discover how to do this :) | 11:56 |
| *** sshnaidm has quit IRC | 12:00 | |
| *** sshnaidm has joined #openstack-ansible | 12:07 | |
| admin0 | rohit02, in the current deployment ( defaults ). the networking used for internal is a un-routed layer2 used only between compute/controllers only accessible to the root user.. so all internal is without ssl and all external/public is with ssl ..if you have a bigger cluster | 12:09 |
| admin0 | in a bigger cluster with 100s of nodes ... the time and cpu usage of ssl will add up to be noticable ( at least in graphs ) :) | 12:10 |
| rohit02 | admin0: its a very small setup with 5 nodes | 12:11 |
| admin0 | so if you have a dedicated nodes for osa . where root/admins have access and no other users are allowed (ssh, have account to tcpdump, or compile c/perl) .. the defaults are safe | 12:11 |
| jrosser | admin0: i think the query here is about how to enable SSL for internal | 12:13 |
| jrosser | depending on the situation defaulting to http may not be acceptable | 12:13 |
| admin0 | right .. that i know .. but i was also letting him know that even without ssl for internal .. he should not feel insecure :) | 12:13 |
| *** shyam89 has quit IRC | 12:15 | |
| openstackgerrit | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Do not generate subunit report https://review.opendev.org/c/openstack/openstack-ansible/+/787358 | 12:17 |
| *** mgariepy has joined #openstack-ansible | 12:37 | |
| *** yasemind has joined #openstack-ansible | 12:47 | |
| openstackgerrit | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Cleanup after service variables merged https://review.opendev.org/c/openstack/openstack-ansible/+/769974 | 12:55 |
| yasemind | Hi, we installed OpenStack stable/victoria(22.1.0) with OSA, We have added the zun compute service, we are using zun-compute nodes only for zun not nova. so it doesn't install network agents. But in zun docs it says on zun compute nodes we need network agent service. when i created zun container, it gave an error | 13:00 |
| yasemind | http://paste.openstack.org/show/804674/ . Do you have any idea? | 13:00 |
| noonedeadpunk | andrewbonney: ^?:) | 13:01 |
| *** spatel_ has joined #openstack-ansible | 13:03 | |
| *** spatel_ is now known as spatel | 13:03 | |
| andrewbonney | Interesting. We deploy on the same hosts as nova so not quite the same. Could you share output from 'journalctl -u kuryr-libnetwork' around that time? | 13:03 |
| yasemind | andrewbonney okey, this error http://paste.openstack.org/show/804675/ | 13:11 |
| andrewbonney | Ok. Assuming it's as simple as missing neutron components I suspect https://github.com/openstack/openstack-ansible/blob/4d6c3a2ec743e149505e5b9c936dacee6d6d4379/inventory/env.d/zun.yml#L19 needs to look a bit more like https://github.com/openstack/openstack-ansible/blob/4d6c3a2ec743e149505e5b9c936dacee6d6d4379/inventory/env.d/nova.yml#L53 | 13:20 |
| andrewbonney | noonedeadpunk: could you confirm my understanding? | 13:20 |
| noonedeadpunk | oh, yes, I think that really might be the case | 13:22 |
| andrewbonney | I'll do a patch | 13:22 |
| openstackgerrit | Andrew Bonney proposed openstack/openstack-ansible master: Install neutron components on Zun compute hosts without Nova https://review.opendev.org/c/openstack/openstack-ansible/+/787364 | 13:24 |
| andrewbonney | yasemind: I'm hoping that the above patch will fix that for you, but I don't have a matching deployment to test on so if you can confirm that'd be great | 13:25 |
| yasemind | andrewbonney okey, we will test it | 13:27 |
| *** dasp_ has joined #openstack-ansible | 13:34 | |
| *** dasp has quit IRC | 13:35 | |
| openstackgerrit | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Cleanup after service variables merged https://review.opendev.org/c/openstack/openstack-ansible/+/769974 | 13:41 |
| openstackgerrit | Merged openstack/openstack-ansible-os_nova stable/victoria: Install spice-html5 from source for RedHat https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/786903 | 13:43 |
| yasemind | andrewbonney we tested it, it works | 13:49 |
| andrewbonney | Awesome, thanks for checking | 13:49 |
| noonedeadpunk | thanks andrewbonney for having a look! | 14:22 |
| *** yasemind has quit IRC | 14:34 | |
| *** luksky has quit IRC | 14:34 | |
| *** luksky has joined #openstack-ansible | 14:35 | |
| *** macz_ has joined #openstack-ansible | 14:37 | |
| *** macz_ has quit IRC | 14:38 | |
| *** macz_ has joined #openstack-ansible | 14:39 | |
| openstackgerrit | Jonathan Rosser proposed openstack/ansible-role-pki master: Add boilerplate ansible role components https://review.opendev.org/c/openstack/ansible-role-pki/+/774620 | 14:40 |
| openstackgerrit | Jonathan Rosser proposed openstack/ansible-role-pki master: WIP - create certificate authorities https://review.opendev.org/c/openstack/ansible-role-pki/+/787404 | 14:40 |
| jrosser | noonedeadpunk: andrewbonney WIP patches so that i can get some input/feedback on the PKI stuff ^^ | 14:40 |
| *** rohit02 has quit IRC | 14:49 | |
| *** mgariepy has quit IRC | 16:08 | |
| openstackgerrit | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_manila master: [goal] Deprecate the JSON formatted policy file https://review.opendev.org/c/openstack/openstack-ansible-os_manila/+/782244 | 16:11 |
| *** chandankumar is now known as raukadah | 16:22 | |
| *** rohit02 has joined #openstack-ansible | 16:34 | |
| *** mgariepy has joined #openstack-ansible | 17:08 | |
| *** rohit02 has quit IRC | 17:09 | |
| *** rpittau is now known as rpittau|afk | 17:24 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_zun master: Fix u-c filter regex https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/783818 | 17:50 |
| *** andrewbonney has quit IRC | 18:01 | |
| openstackgerrit | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_octavia master: Make octavia_provider_network better configurable https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/787336 | 18:20 |
| *** MrClayPole has quit IRC | 18:35 | |
| openstackgerrit | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_gnocchi master: Use ceph_client symlinking process https://review.opendev.org/c/openstack/openstack-ansible-os_gnocchi/+/787433 | 18:38 |
| openstackgerrit | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Cleanup after service variables merged https://review.opendev.org/c/openstack/openstack-ansible/+/769974 | 18:40 |
| *** MrClayPole has joined #openstack-ansible | 18:44 | |
| *** luksky has quit IRC | 19:15 | |
| *** luksky has joined #openstack-ansible | 19:15 | |
| *** luksky has quit IRC | 19:26 | |
| *** luksky has joined #openstack-ansible | 19:39 | |
| *** KurtB has joined #openstack-ansible | 20:46 | |
| *** macz_ has quit IRC | 21:34 | |
| *** spatel has quit IRC | 21:42 | |
| *** KurtB has quit IRC | 22:22 | |
| *** luksky has quit IRC | 22:27 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_swift stable/victoria: Revert "split templates to work around configparser bug" https://review.opendev.org/c/openstack/openstack-ansible-os_swift/+/786790 | 22:57 |
| openstackgerrit | Merged openstack/openstack-ansible-os_zun master: Fix oslo_messaging topic condition https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/787275 | 23:02 |
| openstackgerrit | Merged openstack/openstack-ansible-os_zun master: Allow to override zun policy files https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/782316 | 23:16 |
| *** tosky has quit IRC | 23:42 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!